PT-2025-3831 · Unknown · Leiyuxi Cy-Fast

Name of the Vulnerable Software and Affected Versions: leiyuxi cy-fast version 1.0 Description: A critical vulnerability exists in the listData function of the /sys/user/listData file. Manipulation of the argument order leads to SQL injection, allowing for remote attacks. The exploit has been...

Sucms security vulnerabilities

Sucms is a completely open source and free PHP+MYSQL system by China Subianji team. A security vulnerability exists in Sucms version 1.0, which originates from the parameter uid in the file /admin/adminmembers.php?ac=search that can lead to SQL injection...

WordPress plugin Mailing Group Listserv has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

Code-Projects Cinema Seat Reservation System Injection Vulnerability

Code-Projects Cinema Seat Reservation System is a Code-Projects open source movie theater seat reservation system. An injection vulnerability exists in Code-Projects Cinema Seat Reservation System version 1.0, which is caused by an SQL injection into the parameter id...

CVE-2024-13193

A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMSImages.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The...

PT-2025-4377 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.8 Description: A SQL Injection vulnerability was identified in the "/dao/verificar recursos cargo.php" endpoint, specifically in the cargo parameter. This vulnerability allows attackers to execute arbitrary SQL...

PT-2025-3125 · Polaris Ft · Polaris Ft Intellect Core Banking

Name of the Vulnerable Software and Affected Versions: Polaris FT Intellect Core Banking version 9.5 Description: An issue was discovered in the Interllect Core Search, where input passed through the groupType parameter in "/SCGController" is mishandled before being used in SQL queries, allowing...

WordPress Cost Calculator Builder PRO plugin <= 3.2.15 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Cost Calculator Builder Pro versions = 3.2.15...

CVE-2025-0299

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2025-0294

A vulnerability has been found in SourceCodester Home Clean Services Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /publichtml/admin/process.php. The manipulation of the argument type/length/business leads to sql injection...

WordPress WP Music Player Plugin <= 1.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin WP Music Player versions = 1.3...

WordPress plugin Contact Form 7 Database – CFDB7 SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Contact Form 7 Database - ...

PT-2025-4465 · Unknown · Contact Form 7 Database – Cfdb7

Name of the Vulnerable Software and Affected Versions: Contact Form 7 Database – CFDB7 versions n/a through 1.0.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potential...

PT-2025-4464 · Unknown · Wpindeed Ultimate Learning Pro

Name of the Vulnerable Software and Affected Versions: WpIndeed Ultimate Learning Pro versions prior to 3.9 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially...

PT-2025-4462 · Rto Gmbh · Dynamictags

Name of the Vulnerable Software and Affected Versions: RTO GmbH DynamicTags versions n/a through 1.4.0 Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to improper neutralization of special elements used in SQL commands. This allows an...

Code-Projects Online Book Shop Security Vulnerabilities

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A security vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from an SQL injection vulnerability in the s parameter of the /searchresult.php page...

Vehicle Management System SQL Injection Vulnerability

Vehicle Management System is a vehicle management system by Warren Daloyan, an individual developer. A SQL injection vulnerability exists in Vehicle Management System version 1.0, which stems from vulnerability to SQL injection attacks...

Code-Projects Online Book Shop SQL Injection Vulnerability

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A SQL injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from a SQL injection vulnerability contained in the subcatid parameter of the /booklist.php page...

PT-2025-3820 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A critical issue was found in the code-projects Online Book Shop, affecting an unknown functionality of the file /subcat.php. The manipulation of the cat argument leads to SQL injection...

PT-2025-3819 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A critical issue has been found in the code-projects Online Book Shop. It affects an unknown function of the file /search result.php. The manipulation of the argument s leads to SQL...